Behavioral task
behavioral1
Sample
4654d80fa691d244eb3a832696fcfc60_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4654d80fa691d244eb3a832696fcfc60_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
4654d80fa691d244eb3a832696fcfc60_NEIKI
-
Size
302KB
-
MD5
4654d80fa691d244eb3a832696fcfc60
-
SHA1
a5c7a45b0bf676bda2b84ae002c06e121faa8b37
-
SHA256
6bde4e42de9cff37323feb3f74307c1822e7f3012980fb5ac48a204ff20e5be6
-
SHA512
e621117a5b1ac9f16cdb7f2895573e05693f16b1a52eda0ba1d5e0b5a6ad8efcb07cd87fa069b0e7e81782d78166d46b74c817e787c3826dc38d713e975bd124
-
SSDEEP
3072:L6fOlJXLaYiYIG5eLa0d2SE3NRUlEwzCAf/UsAt/3BPZKf/fGCsN+rQC6AR:Jbawyd6d2HCA0sAt/RPiXGCsmQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4654d80fa691d244eb3a832696fcfc60_NEIKI
Files
-
4654d80fa691d244eb3a832696fcfc60_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE